Beware of malicious typosquatted TOR sites pretending to be eXch

[NotATether]

I was recently alerted of the presence of this site: http://xxkdkmhcrw7mug2nhtorvsusrydoqtfxggeu3rxcxglh3jk7ltmlmeqd.onion/

Apparently a blog post written by eXch themselves, it states that popular onion directories like dark.fail are being ran by scammers who replace the real onionsites for exchanges with fake ones that steal your crypto and send it to the operators (exactly how is still a mystery).

So DO NOT use crypto exchange URLs from the deep web. Only use the ones from this forum, Bitcointalk, or kycnot.me.

[bitmover]

So DO NOT use crypto exchange URLs from the deep web. Only use the ones from this forum, Bitcointalk, or kycnot.me.

This is always a good security procedure.
Double check with their social media profile (or forum profile) every URL of the services you are going to send money to.

[paid2]

I would like to quote a message from eXch that mentions the same scammer and an other exchange that seems to be shady:

We have recently discovered that some service named "MrStork" has advertised an exchange platform on this forum with a rip off of our web-design. While we have no evidence (for now) that this specific service is a scam scheme, we believe it is a potential scam scheme since nobody with proper ethics would blatantly rip-off other service's web-design and advertise as a new platform.

There was already an "exchange" that ripped off our design completely called SWP[.]CX and was proven to belong to a known scammer (more information here https://anir0y-scams.info). There are however already some signs that "MrStork" might be related to that scammer. We also believe that MrStork might be responsible for recent DDoS attacks targeting eXch because the stylometrics used in their announcement thread match emails containing threats we received from the DDoSer.

We strongly recommend avoiding any services that are blatant and obvious copycats of other known and established services.